zowesoft/laravel-credo

Release historycaution

Only three releases exist, all within roughly 7 hours, so there is no established long-term release pattern. The rapid initial releases show activity but do not yet demonstrate durable maintenance.

Repo commit activitycaution

There were no commits or active maintainers in the last three months. Because the package is newly released and was just pushed, this mainly means there is no established maintenance record yet.

Repo toolingcaution

Composer build tooling is present, but no security scanning tooling was detected. This is a modest transparency and hygiene gap, not evidence of abandonment.

Security policycaution

The repository has no security policy. That limits disclosure guidance for a payment gateway integration, although it does not by itself indicate poor maintenance.

Workflow auditcaution

Both workflows were fully analyzed with no detected audit findings or unsafe untrusted triggers. However, all three action references are unpinned, and one workflow grants top-level write permissions, creating a moderate supply-chain hygiene concern.